Hi all -- I would like to set up a script that would add and drop DNAT rules while Shorewall is running. I don''t see a /sbin/shorewall command that would do it. So, it seems to me the script could edit /etc/shorewall/rules to insert or remove the DNAT rules as needed, then execute a /sbin/shorewall restart command. Does anyone see a reason not to do that, or see a way to do it without restarting shorewall? Thanks in advance. Jim